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DETAILED ACTION 
Priority 

1 . Acknowledgment is made of applicant's claim for foreign priority under 35 
U.S.C. 119(a)-(d). 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on September 24, 2004 is 
in compliance with the provisions of 37 CFR 1 .97. Accordingly, the information 
disclosure statement is being considered by the examiner. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an International application filed under the treaty defined In section 
351(a) shall have the effects for purposes of this subsection of an application filed In the United States 
only If the International application designated the United States and was published under Article 21 (2) 
of such treaty In the English language. 

4. Claims 1-21 are rejected under 35 U.S.C. 102(e) as being anticipated by Ellison 
et al, U.S. Patent 7,082,615. 

As per claim 1 , it is taught of a method of automatic validation of a computer 
program able to access secure memory (MS) and non-secure memory (MNS), the 
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program using at least one encryption function (DES) and at least one decryption 
function (DES-1), characterized in that it comprises a verification step (E340) which 
verifies that: any function adapted to read data from said secure memory (MS) and to 
produce data in said non-secure memory (MNS) is an encryption function; and any data 
produced by said decryption function is stored in said secure memory (MS)(col. 6, line 
44 through col. 7, line 27). 

As per claim 2, it is disclosed of a validation method according to claim 1 , 
characterized in that said program also uses at least one non-cryptographic function, 
said non-cryptographic function being chosen from a logic function, a random number 
generation function and an integrity check function (col. 8, lines 47-65 and col. 9, lines 
6-24). 

As per claim 3, it is taught of a validation method according to claim 2, 
characterized in that any data produced by said non-cryptographic function from data 
read in said secure memory (MS) is stored in said secure memory (MS)(col. 6, line 44 
through col. 7, line 27). 

As per claim 4, it is disclosed of a validation method according to claim 1 , 
characterized in that, the computer program being in source code, the method 
comprises, before said verification step (E340), a step (E300) of compilation of said 
source code into binary script (EXE), said verification step (E340) being effected on the 
binary script (EXE) generated in this way (col. 8, lines 47-65 and col. 9, lines 6-24). 
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As per claim 5, it is taught of a validation method according to claim 1 , 
characterized in that said computer program is a sensitive data generation program (col. 
6, line 44 through col. 7, line 27). 

As per claim 6, it is disclosed of a validation method according to claim 1 , 
characterized in that said computer program is a sensitive data transformation program 
(col. 6, line 44 through col. 7, line 27). 

As per claim 7, it is taught of a validation method according to claim 1 , 
characterized in that each function used by said computer program is associated with at 
least one operating mode that defines at least one rule governing access to said 
memories, said operating mode being stored in a verification table (TV) used during 
said verification step (E340) (col. 6, line 44 through col. 7, line 27). 

As per claim 8, it is disclosed of a validation method according to claim 7, 
characterized in that it further comprises a step (E310) of allocation of said secure 
memory (MS) and said non-secure memory (MNS); a step of loading into a working 
memory a verifier program for said binary script (EXE), said verifier program being 
adapted to implement said verification step (E340); and a step (E305) of loading said 
binary script (EXE) into said working memory (col. 6, line 44 through col. 7, line 27; col. 
8, lines 47-65; and col. 9, lines 6-24). 

As per claim 9, it is taught of a compiler characterized in that it is adapted to 
implement a validation method according to claim 1 (col. 8, lines 47-65 and col. 9, lines 
6-24). 
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As per claim 10, it is disclosed of a method of executing a computer program 
adapted to access secure memory (MS) and non-secure memory (MNS), the program 
using at least one encryption function (DES) and at least one decryption function (DES- 
1), characterized in that a verification step (E340) conforming to claim 1 is executed 
before the execution (E420) of each function of said program (col. 6, line 44 through col. 
7, line 27; col. 8, lines 47-65; and col. 9, lines 6-24). 

As per claim 1 1 , it is taught of the use of the execution method according to claim 
10 to transform or generate sensitive data (col. 6, line 44 through col. 7, line 27). 

As per claim 12, it is disclosed of the use of the execution method according to 
claim 10 to customize microcircuit cards (col. 7, lines 59-63). 

As per claim 13, it is taught of an integrated electronic circuit characterized in that 
it is adapted to implement a validation method according to claim 1(col. 8, lines 47-65 
and col. 9, lines 6-24). 

As per claim 14, it is disclosed of a microcircuit card characterized in that it 
comprises an integrated electronic circuit according to claim 13 (col. 7, lines 59-63). 

As per claim 15, it is taught of a computer system characterized in that it 
comprises an electronic integrated circuit according to claim 13 (col. 7, lines 59-63). 

As per claim 16, it is disclosed of a secure operating system adapted to 
implement a validation method according to claim 1 (col. 8, lines 47-65 and col. 9, lines 
6-24). 

As per claim 17, it is taught of a microcircuit card characterized in that it 
comprises an operating system according to claim 16 (col. 3, lines 9-25). 
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As per claim 18, it is disclosed of a computer system characterized in that it 
comprises an operating system according to claim 16 (col. 3, lines 9-25). 

As per claim 19, it is taught of a device for validating a computer program 
adapted to access secure memory (MS) and non-secure memory (MNS), the program 
using at least one encryption function (DES) and at least one decryption function (DES- 
1 ), characterized in that it comprises a verifier program adapted to verity that: any 
function adapted to read data from said secure memory (MS) and to produce data in 
said non-secure memory (MNS) is an encryption function; and any data produced by 
said decryption function is stored in said secure memory (MS)( col. 6, line 44 through 
col. 7, line 27). 

As per claim 20, it is disclosed of a validation device according to claim 19, 
characterized in that the verifier program is adapted to effect said verifications on the 
basis of a binary script (EXE) obtained by compilation of said computer program (col. 8, 
lines 47-65 and col. 9, lines 6-24). 

As per claim 21 , it is taught of a computer system comprising a secure operating 
system characterized in that it comprises means for compiling a computer program in 
binary script (EXE); means for loading said binary script (EXE) into a working memory; 
means for allocating secure memory (MS) and non-secure memory (MNS); and a 
validation device according to claim 19 (col. 6, line 44 through col. 7, line 27; col. 8, 
lines 47-65; and col. 9, lines 6-24). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from tine 
examiner should be directed to Christopher A. Revak whose telephone number is 571- 
272-3794. The examiner can normally be reached on Monday-Thursday, 9:00am- 
5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 )272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Christopher A. Revak/ 
Primary Examiner, Art Unit 2431 



